> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/instance-configuration.md).

# Instance configuration

{% hint style="warning" %}
Defguard Desktop Client is required if you want to use Multi-Factor Authentication, as any other WireGuard client doesn't support this functionality.
{% endhint %}

### Obtaining URL and Token

{% hint style="info" %}
If you are looking for how to generate tokens for your users as an Administrator, look here:

[Adding client device](/2.1/features/wireguard/remote-desktop-activation.md)
{% endhint %}

1. Log in to your Defguard account.
2. In account profile, open **Devices** tab.
3. Click **Add new device.**<br>

   <figure><img src="/files/7cBUazE1a7bI0T5lO0mw" alt="" width="563"><figcaption></figcaption></figure>
4. Select **Client Activation** and click **Next**.<br>

   <figure><img src="/files/eVSRo1PEv5t8ds4qND52" alt="" width="375"><figcaption></figcaption></figure>
5. Afterwards, use **One-Click Configuration** or click **Show advanced configuration** and copy **URL** and **Token** manually.

<figure><img src="/files/iQXgNMvHXLP2U6vZb0Wh" alt="" width="375"><figcaption></figcaption></figure>

### Manually Adding Instance

1. Open Defguard client
2. Click **Add Instance**.

<figure><img src="/files/GkRooEyd5lJNS53N3EWn" alt=""><figcaption></figcaption></figure>

3. Enter URL and Token, then click **Add Instance**. (If you don't have it, check out [this section](#obtaining-url-and-token))

<figure><img src="/files/J6zguuNJ3H8MWdaaa9tD" alt=""><figcaption></figcaption></figure>

### One-click Desktop Configuration

You can skip the whole process of entering the token/URL by clicking "One-Click Desktop Configuration". Here is a video describing the whole process:

{% embed url="<https://www.youtube.com/embed/q5-AXOPLgHc>" %}

### Connecting to Instance

1. Select your Instance from menu

<figure><img src="/files/AUd3Z2T73yTu1eoeMunP" alt=""><figcaption></figcaption></figure>

2. Select your location, allowed traffic then click **Connect.**

{% hint style="info" %}

* **Predefined traffic** will only route traffic specified by your administrator.
* **All traffic** will route everything through VPN tunnel.
  {% endhint %}

<figure><img src="/files/XR8YulEpl9xpOWblDxlD" alt=""><figcaption></figcaption></figure>

### Disconnecting from Instance

Click **Disconnect** next to the location you are currently connected to.

<figure><img src="/files/Savgj1i1W9WXCmKDdLpW" alt=""><figcaption></figcaption></figure>

### Updating Instance

If you want to update your instance manually:

1. Go to your Instance and click **Edit Instance**

<figure><img src="/files/ylYM4UuTAyNmfIIX7ADY" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Only tokens issued from that specific instance will work in that modal.
{% endhint %}

2. Enter Token provided by your administrator, or generate it [on your own](#obtaining-url-and-token). Then click **Update Instance**

<figure><img src="/files/9nMHEKK2LwV1kPhDWSNW" alt=""><figcaption></figcaption></figure>

Your Instance will update immediately.

### Why do instances need updates?

Defguard Desktop stores all information locally and doesn't communicate with Defguard outside the registration process. This means that the information about an instance is a snapshot of the moment you registered it in the desktop client, and you might want to update it, for example when locations are added or removed.

{% hint style="success" %}
If you have an Enterprise License, all desktop clients and all instances are [synchronized automatically and in real-time.](/2.1/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
{% endhint %}

### Removing Instance

1. Go to your Instance and click **Edit Instance**

<figure><img src="/files/ylYM4UuTAyNmfIIX7ADY" alt=""><figcaption></figcaption></figure>

2. Click **Remove Instance**

<figure><img src="/files/DCKPOpItvzcWJ3LMsdRL" alt=""><figcaption></figcaption></figure>

Your Instance will be removed immediately.